Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
File: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft (raw, json)
Hash identifier: pc6vXJw8pP/MeOSvju9SK95AIzW64fptfIk0zEauVp4=
Subject key identifier: 3A:5E:AF:BC:C7:D7:9E:6A:AB:52:A0:0D:C1:D0:53:9D:CD:59:1C:28
Authority key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Certificate issuer: /CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Certificate serial: 019588BA955B61F3544A0FC6E275BAB9882F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
Manifest number: 02E7
Signing time: Wed 12 Mar 2025 05:01:23 +0000
Manifest this update: Wed 12 Mar 2025 05:01:23 +0000
Manifest next update: Thu 13 Mar 2025 05:01:23 +0000
Files and hashes: 1: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl (hash: 7sDWv0XdNZcgc3wKGTzcu2Ytklb2LMARTtS4huegXZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:ba:95:5b:61:f3:54:4a:0f:c6:e2:75:ba:b9:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Validity
Not Before: Mar 12 05:01:23 2025 GMT
Not After : Mar 13 05:01:23 2025 GMT
Subject: CN=3a5eafbcc7d79e6aab52a00dc1d0539dcd591c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:05:3b:a3:eb:e4:0a:2d:7e:dc:b5:e0:9c:
03:08:f1:47:eb:37:fe:29:8f:be:5c:da:42:b3:6d:
92:b5:63:a6:33:1c:95:dc:73:7e:5d:60:92:69:54:
1a:e4:a8:bb:4a:18:7c:ba:0a:4e:0d:eb:93:98:35:
33:79:0f:8e:31:f0:7b:48:8a:6c:e1:cd:f5:54:2f:
ac:52:fa:e7:e9:39:cb:c1:50:04:00:cb:bb:ca:07:
f5:ea:06:6c:03:ed:98:37:c7:44:a9:3e:90:f9:e3:
16:00:9e:5f:8b:5b:1c:ce:38:3e:75:c1:7d:ec:9a:
93:02:4a:7c:61:92:9a:4d:79:9e:e7:c3:e4:81:48:
48:f8:1d:af:df:c7:43:4d:df:18:f9:e1:af:33:5c:
4d:95:6d:82:0c:c4:fb:dd:f6:ff:51:00:06:20:47:
56:82:33:0f:ff:9b:f4:b7:8b:a6:33:66:78:ae:77:
02:15:63:1b:3a:4f:92:fe:96:75:01:c4:ef:61:15:
63:e8:b7:2c:b2:32:a0:e4:65:af:14:12:74:9d:5b:
07:d8:75:08:e2:1c:f7:c3:bd:c5:1a:5f:1c:78:5d:
9b:b8:b1:cd:cd:9e:96:10:db:b5:3a:c0:25:a6:a3:
2e:6f:6c:f9:dc:de:fc:81:f8:e3:da:87:fc:9d:5c:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:AF:BC:C7:D7:9E:6A:AB:52:A0:0D:C1:D0:53:9D:CD:59:1C:28
X509v3 Authority Key Identifier:
keyid:8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:45:d6:e6:df:bc:77:b6:27:b0:db:93:27:ff:90:83:aa:67:
3e:84:81:86:c8:fd:df:92:65:4a:40:13:29:4a:9c:ab:7f:53:
ae:0a:87:7d:7e:b0:d1:c6:37:48:6a:b5:e1:f0:be:86:1a:f4:
ca:d2:38:02:4c:19:64:fb:77:ad:4d:a3:82:96:93:12:21:67:
bd:a7:3a:a5:1b:f3:c6:26:ff:11:fc:78:83:14:fe:d1:4f:67:
63:20:70:ea:51:a8:37:ae:e8:13:d3:62:2e:d9:5e:8f:07:c5:
90:31:e6:63:9d:a2:c9:c8:3e:c0:74:7f:4c:8d:55:e4:7c:b2:
4f:2d:20:38:27:1e:08:75:c1:dd:d6:c4:4b:dc:42:e0:54:46:
12:c6:1a:1e:3f:b5:86:21:72:20:70:49:9e:d3:ec:06:5c:e4:
a8:07:f1:06:23:f2:92:b3:92:21:e1:78:bd:5c:fe:fe:7e:4b:
ac:20:f6:ed:05:41:70:3a:18:7e:88:00:a8:c6:84:ea:47:70:
6a:64:48:f3:7b:06:df:0d:a1:26:01:c2:51:48:35:86:d0:03:
f0:b2:3d:8a:53:ad:18:ab:ea:5c:2c:44:cf:85:de:69:fe:cf:
92:fa:44:a5:14:19:62:35:85:f6:d9:1c:8b:a3:48:23:c5:65:
a5:e4:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:41 2025 by rpki-client